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Abstract 

Given a verifier circuit for a problem in QMA, we show how to exponentially amplify 
the gap between its acceptance probabilities in the 'yes' and 'no' cases, with a method that 
is quadra tically faster than the procedure given by Marriott and Watrous [1J. Our construc- 
tion is natively quantum, based on the analogy of a product of two reflections and a quantum 
walk. Second, in some special cases we show how to amplify the acceptance probability for 
good witnesses to 1, making a step towards the proof that QMA with one-sided error (OMA^ 
is equal to QMA. Finally, we simplify the filter-state method to search for QMA witnesses by 
Poulin and Wocjan 0. 

1 Introduction 

Which decision problems (yes /no questions) can be efficiently solved on a classical computer? 
All such problems constitute the complexity class P. The goal of many algorithm designers is to 
place problems into P by finding efficient algorithms for therrQ. Another notable complexity class 
called NP, is the class of problems whose solutions can be efficiently verified. However, finding 

these solutions might be hard, as NP contains notoriously hard problems like Satisfiability |4|. 

? 

Whether all the problems in NP could be actually solved in polynomial time (i.e. P = NP) is one 
of the most interesting open questions of modern computer science ||5] . 

The problems efficiently solvable with randomized circuits, i.e. with circuits that are allowed 
to fail with some bounded probability, constitute the class BPP. When we now allow the solution- 
verifying procedure in the definition of N P to have a small probability of failure, we get the com- 
plexity class MA. This acronym stands for "Merlin- Arthur", as the verifying protocol for the prob- 
lems in MA goes like this: an all-powerful Merlin provides a 'proof (also called a witness) which 
a rational Arthur verifies. The problems in MA are those for which Merlin can convince Arthur 
that the answer to his question is 'yes' if it is so, while he has a low probability of fooling Arthur 
in the 'no' cases. 
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The world is quantum mechanical, so it is natural to ask what can be efficiently computed 
on a quantum computer? All such problems form the complexity class BQP, and include such 
problems as factoring [6] and approximating the Jones Polynomial 0. Kitaev [8] and Watrous Q 
defined a quantum analogue of the class MA, calling it QMA (Quantum Merlin- Arthur). 

Let us look at the verifying procedure in more detail, starting with an exact definition of QMA. 

Definition 1 (QMA). Consider a language (a set of 'yes'/'no' questions) L = L yes U L no . Denote its 
instances x. The language L belongs to the class QMA if 

1. there exists a uniform family of quantum verifier circuits V working on n = poly(\x\) qubits and 
m = poly(\x\) ancillae, and two numbers a, b, with separation a — b lower bounded by an inverse 
polynomial in n, 

2. for x e L yes (the answer to the question x is 'yes'), there exists a witness such that the circuit V 
on \0)® m outputs 'yes' (Arthur is convinced) with probability p max > a, 

3. for x 6 L no , for any state \ip), the circuit V on \<p) |0)® m outputs 'yes' (is fooled) with probability 

Pmax b, 

When the separation a — b for a verifier circuit V is small, it could take Merlin many verification 
rounds to convince Arthur that the answer to the question x really is 'yes'. However, the sepa- 
ration a — b can be amplified by modifying the original verifier circuit, obtaining a new amplified 
circuit with strong promise bounds 

S Lyes • Pmax ^ 1 6 , (1) 

X £ L no . Pmax ^ 6 , 

for some constant r. 

The first such amplification procedure by Kitaev [8] uses a circuit made from 

CT 

(for some constant c) parallel copies of the circuit V, with majority voting at the end. Kitaev 
showecH that this new circuit has the strong promise bounds The drawback of this procedure 
is that Merlin now has to provide an iV times longer witness. 

In (3, Marriott and Watrous showed that a single quantum witness of length n suffices, find- 
ing a verification procedure which reuses this witness many times. Their amplified circuit uses N 
copies 10 of the original circuit V and its conjugate V\ interspersed with some additional opera- 
tions. The procedure ends with iV measurements and classical processing of the results. Arguments 
employing Chernoff bounds are then used to establish the strong bounds {T) in the 'yes' and 'no' 
cases. We give further details about their approach in Section 12^21 

The first result of our paper is a new and faster QMA amplification method. 

Theorem 1 (Fast QMA Amplification). Consider a verifier circuit V for a problem in QMA, acting on n 
qubits and m ancillae, with promise bounds a and b. There exists an amplified verifier circuit V' acting on 
n qubits and poly(n) ancillae, using 

N' = (3) 



Note that it was necessary to show that entangled witnesses wouldn't help Merlin to cheat in the 'no' cases. 
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evaluations of the original circuit V and its conjugate W, with promise bounds amplified to Q}. 

Note that the dependence of N' on is quadra tically better than in (0. This speedup is 
possible because our circuit V uses intrinsically quantum methods for producing its final answer. 
There are two ideas behind our construction. First, we utilize the connection between a product of 
two reflections and a generalized quantum walk. Second, the final coherent processing in the circuit 
is based on phase estimation [10| (or alternatively, the filter state method of Poulin and Wocjan 
J2)) instead of classical majority voting (as in [8]) or counting (as in lUfl ). 

When a in the definition of QMA is exactly 1, we get a special case of QMA, called QMAi, or 
QMA with one-sided error. In this case, there exists a witness which the circuit V accepts without 
failing. A typical example of a problem in this class is Bravyi's Quantum fc-SAT [11 J . In the 
classical world, the class MA with probabilistic verifier circuits can be amplified to MA without 
errors fl2lll3l . However, it is a big open question, whether the corresponding quantum classes are 
equal, i.e. whether QMA = QMAi. In |T4| , Aaronson argued that this problem is hard and gave 
an oracle separating them. The second result of our paper is a step towards answering whether 

QMA = QMAi. We show that for a class of QMA verifier circuits, we can amplify the probability 
promise a up to 1 exactly, as opposed to exponentially approaching it as in Q}. 

Theorem 2 (QMA(a* , b) = QMAi). Let V be a verifier circuit for an instance of a language in QMA, with 
promise bounds a and b, and let p ma x be its highest acceptance probability p ma x in the 'yes' case. When 
Vmm = \ arccos ^/Pmax can be expressed exactly by t = poly log (\x\) bits, there exists a circuit V* onn + t 
qubits and poly(n) ancillae whose acceptance probability in the 'yes' case is exactly 1. Said alternatively, 
QMA\ is equal to this subclass of QMA. 

Note that besides the witness, the new verifier circuit V* needs to receive the description of a*. 
Also note that obtaining a result of this type is possible only because of the coherent phase- 
estimation processing. Marriott and Watrous' QMA amplification scheme can not be used to 
amplify the probabilities to 1 exactly, because of the inherent probabilistic nature of the measure- 
ments. 

The paper is organized as follows. First, in Section l2Tl we establish two important geometrical 
facts about two projectors, required for the analysis of the amplification protocols. In Section fL2\ 
we revisit the witness-preserving QMA amplification protocol of Marriott and Watrous [1J. Then 
in Section 12.31 we give a faster QMA amplification method utilizing phase estimation instead of 
classical final processing. Second, in Section [3] we show that in a special case when the maximum 
acceptance probability of the verifier circuit has a particular description, we can amplify it to 1 
exactly. Finally, in Section HI inspired by our fast QMA amplification, we simplify the method for 
preparing QMA witnesses by Poulin and Wocjan [2], based on filter states. 

We conclude with a discussion of our results in Section[5] Finally, Appendix|A]contains a new 
proof of the relationship of the eigenvalue gap of a classical random walk and the phase gap of a 
quantum walk, based on Jordan's lemma. 

2 Fast QMA Amplification 

We arrive at our new QMA amplification scheme, based on phase estimating a certain unitary op- 
erator, in several steps. First, with the help of Jordan's lemma, we look at how two projectors act in 
a Hilbert space. This helps us to understand the Marriott and Watrous [1 j amplification scheme in 
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Section |Z21 based on alternative projective measurements. Second, Jordan's lemma, together with 
a connection from quantum walks, leads us to realize that a product of the reflections about the 
supports of the projectors acts as a rotation within certain subspaces of the Hilbert space. Instead 
of projective measurements, we thus base our amplification scheme of Section 12.31 on the phase 
estimation of these rotations. This leads to a speedup in the number of the required evaluations 
of the verifier circuit. 

2.1 Facts about Two Projectors and Two Reflections 

In this geometrically-focused section, we establish several facts required for understanding both 
Marriott and Watrous' witness preserving QMA amplification of Section I2T21 and our new method 
in Section 1231 

First, consider two projectors Ilo and IIi on the Hilbert space H. Jordan's lemma [15J (see also 
Appendix© tells us that given two projectors, we can decompose our Hilbert space into 

1. two-dimensional subspaces Si invariant under Ilo an d II i, and 

2. one-dimensional subspaces Tj, on which IIoIIi is an identity or a zero-rank projector. 

Let us focus on the more interesting two-dimensional subspaces. For each of them, we can choose 
a basis {\vi) , \v^- )}, obeying 

Uo\vi) = \vi), n |^) = o. (4) 
We can also choose another basis {\wi} , \ w^-}} for Si from the eigenvectors of IIi, obeying 

Hi \wi) = \w t ) , Ui\w±)=0. (5) 

We can also make a choice of phases so that (vi\wi) is a real positive number, and define the 
principal angle 

tpi = -arccos(|(«i|wi)|). (6) 

Let pi be the expectation value of FL in the state \vi). In Sections l2!2l and 1231 pi will be the proba- 
bility that the verifier circuit V accepts the state \vi). The projector IIi restricted to the subspace Si 

is \ wi) (wi\, so we have 

Pi = {Vi\ 111 \Vi) = (Vi\Wi) (Wi\Vi) = COS 2 (lTipi). (7) 

Using pi, we now express 

K) = vSK) + V 1 -Pi\ w i~)i ( 8 ) 

K) = VP~i\Vi) + V 1 ~Pi\ v i~)- 

This symmetrical relationship is an essential element in Marriott and Watrous' witness-preserving 
QMA amplification scheme in Section f22\ 

Second, let us look at the reflections about the supports of Flo and ITl: 

F = 2110-1, (9) 
Fx = 2IL; - L 

Using the decomposition of the Hilbert space from Jordan's lemma, we can prove the following 
theorem about the eigenvalues of the product of two reflections: 
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Figure 1: The circuits for measuring a) {ITi , I — ITi} and b) {ITo, I — IIo} in Marriott and Watrous' 
QMA amplification scheme. 

Theorem 3. Let TIq and II i be projectors and Fq and F\ the reflections about their supports. The Hilbert 
space can be decomposed into two-dimensional and one-dimensional subspaces invariant under Hq and Hi. 
The unitary operator F\Fq = (2ITi — I)(2ITo — I) is a rotation e l2ni Pi a y with eigenvalues e ±l2niPl with 
< ifi < \ corresponding to eigenvectors 

\<p+) = ^= (h) + i\vh) , \<p7) = ^= (k) - i\vh) , (io) 

in the two-dimensional invariant subspaces Si, and eigenvalues ±1 in the one-dimensional invariant sub- 
spaces Tj. 

Thus, within each two-dimensional subspace Si, the product of two reflections F\Fq is a rotation 
by 2-Kifi, with ip^ given in ©. We rely on this fact in our fast QMA amplification scheme in Section 

m 

This theorem, proved by Szegedy |16| is a base component in many results about quantum 
walks. We also point the interested reader to a new proof of Theorem [3] using Jordan's lemma in 
AppendixlAl 

2.2 Witness-preserving QMA Amplification 

We can now look at the QMA amplification scheme of Marriott and Watrous [1J which we want to 
speed up. Consider now the two projectors: 

n = |o)(o| anc; (li) 
ni = Wiixiuv; 

with ITo projecting onto zeros on the ancilla qubits, and ITi projecting on the states that are ac- 
cepted by the original verifier circuit. Note that the support of IIi can contain states with nonzero 
ancillae. The promise bounds of the original circuit V are a and b. The amplification procedure 
with the strong promise bounds Q} is the following: 

1. Combine a single input witness of length n with fresh ancilla qubits. 

2. Perform a sequence of N = , alternating measurements of {il , 1 — n } and {IIi , I — H{\ 
(see Figured]). 

3. Inspect the sequence of results, and count the number of times when two consecutive results 

When this number is smaller than N^^, output 'yes', otherwise output 'no'. 

3 To allow this number to reach TV, attach a zero at the start of the sequence of measurement results. 
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Let us sketch why this scheme works. Recall the decomposition of the Hilbert space into 2- 
dimensional and 1-dimensional subspaces in Section I2T1 and focus on the 2D subspaces Sj. We 
can choose two bases for each subspace Si as in ((4]) and (0. Our ITo is such that the states \vi) © 
have the ancillae in the state zero, i.e. = |0). With our choice of IIi, 

Pi = (vi\ IIi \vi) = <0| W |1) (lL t V |^) |0) , (12) 

defined in 10 is the probability that the original circuit V accepts the witness \ipi). 

We now choose some \vi) as the initial state and perform the sequence of alternating measure- 
ments of ITo and ITi, obtaining a bit string. Throughout this procedure, the state of the system 
stays within the original 2-dimensional subspace Si. Moreover, the identities in |(8]) imply that the 
probability of obtaining two consecutive O's or l's (projecting onto from \vi), etc.) is pi, while 
the probability of obtaining 10 or 01 is (1— pi). The probability of a given sequence of measurement 
results is then 

Pse q = (l-Pi) Z p N - Z , (13) 

where z is the number of times consecutive measurement results differ. When getting z < N ( a + b ') f 
we output 'yes', and for z > Ar (° +b ) we output 'no'. Marriott and Watrous use arguments based 
on Chernoff bounds to show that these answers have exponentially good confidence bounds Q}. 
What remains is to show that in the 'no' case, a superposition of the states for different i's will 
not help Merlin to fool Arthur. 

To summarize, the scheme consists of N measurements (O, and one half of them involves 
evaluating the circuit V and its conjugate. Note that the processing of the sequence of results is 
based on classical statistical methods. In the next Section we show that using a natively quantum 
algorithm (phase estimation or filter states) results in faster amplification. 



2.3 Fast QMA Amplification Based on Phase Estimation 

In our new amplification procedure, we utilize the same pair of projectors IIo and IIi ^H} as Mar- 
riott and Watrous. However, instead of measuring them directly, we build our circuit using the 
reflections Fq and F\ (O about their supports. Theorem [3] tells us that within the two-dimensional 
invariant subspaces introduced in Section l2Tl the product F\Fq is a rotation by an angle related 
to an acceptance probability for the original circuit V. This turns the problem of accepting or re- 
jecting witnesses for the circuit V into the problem of determining the properties of the rotation 
coming from the operator FiFq. We will show that a small rotation corresponds to a high accep- 
tance probability for the circuit V and vice versa. We thus do phase estimation on the operator 
F\Fq, accepting or rejecting the witness depending on the phase we obtain. Finally, to boost the 
probability of success, we concatenate several such phase estimation procedures, obtaining the 
desired strong promise bounds Q}. 

First, let us look at a 'yes' case, and show that Merlin can convince us about it. Just as in Section 
12.21 he chooses a witness \tpi), which we combine with fresh ancillae to get 

\vi) = \A) |0> , (14) 

an eigenvector of IIo, belonging to one of the two-dimensional invariant subspaces Si we intro- 
duced in Section l2Tl From Theorem |3l we know that within this subspace, F\Fq has the form 
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e i2-Kifiu y anc j eigenvalues are e ±l2nip \ with ipi given by (6). Recalling ((10)) , we can express \vi) in 
terms of the eigenvectors \ipf) of F1F0 as 

\vi) = \ (\vi) + i\vh) + \ (|«i> - i^}) = ^ (k + > + Wi)) ■ (15) 

Merlin chooses his witness so that the corresponding phase <pi is the smallest. According to 
((12)) and 0, such ^ corresponds to picking the witness with the largest possible acceptance 
probability pi. Because we are talking about the 'yes' case, this <p[ yes ^ is upper bounded by 

(yes) 1 — 1 



09, = — arccos yjpl < — arccos yfa = ip a , (16) 

7T 7T 

where a is the guaranteed acceptance probability for some witness in the definition of QMA. Sim- 
ilarly for a 'no' case, the smallest possible v4 is lower bounded by 



(no) _ _ arccos /pt > _ arccos y 7 ^ _ (17) 
7T 7T 

Our approach will be to measure the rotation phase for the state \ vi) ((15)) , and to resolve whether it 
is less than tp a , or larger than ipi,. Note that the phase estimation for the operator FiFo on the state 
((IB} has two possible results ±o9j. However, because of the form of ((7)), we are only interested in 
the absolute value \tpi\. We can recognize we got an estimate of the negative phase — tpi when we 
measure <// G [|, l], and we then use the value 1 — <p' G [0, |] instead of it. 

We get the state ((15)) on the input, and our phase estimation outputs some value <p' . To be 
convinced that \<p'\ is smaller than ip a or greater than ipi,, we need a precision guarantee 

<V = j • ( > 

Using the Taylor expansion of arccos x around x = 0, we bound 

i (arccos V6- arccos V3 



7T 



1 ( 2ra ) ! 1 [/ r \2n+l ( rr 

^Z^ 2 2n (rl!) 2 2n + 1 (V«j -(V6 
n=0 



2n+l 



> , a ~ b rV (19) 



as all the coefficients in the sum are positive and we have a > b, so we can lower bound the 
expression by the n = term. Therefore, we need 

1 2 1 it (y/a + \/6j 
n = -1 + log— = -1 + log = log <log— : (20) 

dip ¥b-<£a ¥b-Va a-b 

bits of precision for our phase estimation. According to fl7||, a phase estimation algorithm precise 
to n bits, with failure probability e pe requires 

t = n + log [2 + l/(2e pe )] (21) 
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Figure 2: The scheme for concatenating r phase estimations of FxFq. 
ancilla qubits. The number of times we need to perform a controlled- (F\Fq) operation is then 



2Gp e 



i \ 10vr (y/E + Vb) 
N x = 2* - 1 < 2 n ( 2 + < i (22) 



using (|20]l and choosing e pe < ^ as an upper bound on the failure probability. 

We want our procedure to work with exponentially small failure probability. To achieve this, 
we concatenate r phase estimation circuits as in Figure |2] and take the median of the r results 
(recall that we use \<p\ G [0, ^] here). Because of the following lemmc@, the median phase is a good 
estimate of the actual phase ip-i, with high probability. 

Lemma 1 (Median lemma). Consider a sequence {ip' k } for k = 1, . . . , r. Let the probability that (p' k does 
not belong to an interval LR = ((pi, <pr) be e, with e < \. Then the probability that the median of {<f' k } 

falls out of LR is bounded by pf ai i 



Proof. The only way the median could fall out of the interval LR is by having more than half of 
the datapoints ip' k falling out of it. This probability is bounded by 

k ~ 2 k ~ 2 



K ~2 



= 5 lv^ 

where we used the fact that e < \, so that < 1 and 2-y 7 e(l — e) < 1. □ 

Recall that the precision ((18)) we demanded for <p' is such that when we get a phase smaller than 
Va +' fib , we conclude that we have a 'yes' case. Lemma [T] tells us that for e pe = j^, the probability of 
our median scheme failing (producing a bad estimate of the phase) is bounded from above by 



Pfail < ?j f 2, \/epe(l - e P e)^ < 2" 



(24) 



4 Our median lemma is a variant of the powering lemma 1 18 1 
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This gives us the first of the strong promise bounds (fTJ), with 

10vr (y/E +Vb)r 

N' = rNi = = '—. (25) 

a — b 

uses of the verifier circuit and its inverse. In the worst case (when the phases are hardest to tell 
apart), we have a ~ b ~ \, giving us N' = 2 fa~b) • We can com P are this to (0, where the actual 
value of the constant is c = 2, and see that our method is better already for a — b < \. Of course, 
our motivation to start thinking about a new QMA amplification method was the case when a — b 
is tiny. 

For the 'no' case, the analysis is the same as above, if |0) (the witness combined with fresh 
ancillae) belongs to one of the two-dimensional invariant subspaces. The smallest median phase 
we can get corresponds to the largest possible acceptance probability, which is lower than b. The 
probability of obtaining a median of the r the phase estimations below fa+f>b (i.e. Arthur be- 
ing fooled) is again upper bounded by (|24)) . On the other hand, what if we get a superposition 
Yli v i\ v i) with \vi)'s from different two-dimensional invariant subspaces on the input? The final 
phase measurement on a superposition like ^ v% \v£) \<pi) gives us a classical mixture of results 
tpi, weighted by vf. Therefore, it's always better for Merlin to choose a single i with the smallest 
possible pf 10 ^ if he wants to have a chance of fooling us. Nevertheless the probability to measure 
a phase smaller than <fia +' fib in a 'no' case is upper bounded by e pe for any \at). Recalling what we 
did above, several concatenated phase estimations allow us to detect that ip' > LpaJ ^ Ph with high 
probability. We then conclude that Merlin is just trying to fool us. 

3 Is QMA with one-sided error equal to QMA? 

Merlin knows all about our verifier circuit. This means he also knows the division of the Hilbert 
space corresponding to the two projectors IIo and IIi described in Section 12.11 and the bases 
{\vi) , \Vi)} of the two-dimensional invariant subspaces. Each of the vectors \v{) = \ipi) |0) is a 
combination of the eigenvectors ([15]) of the product of two reflections F\Fq (O, with eigenvalues 
e ±i2mpi xhrough 10 and ((12)) , the phase ifi is related to the probability that the circuit V accepts 
the witness If Merlin sent us \v{) and told us what the phase (pi is, we could verify his claim. 
However, the phase estimation circuit is not always perfect. Still, it works exactly, if the phase we 
are estimating has an n-bit binary expansion. Thus, we could do the following: 

1. Merlin sends us the state \4>i) witness ® \Pi) n , with \<Pi) n an exact n-bit binary encoding of 

2. Measure \<Pi) n in the z basis, obtaining the number ifi. Continue if Pi = cos 2 (7r^j) > a. 

3. Run the fast QMA amplification scheme. When the witness is \ipi), the resulting phases we 
measure must all be equal to ipi or —tpi, because the n-bit phase estimation should work 
perfectly for ipt with an exact n-bit binary expansion. 

4. Only when the result agrees with the ipt which Merlin has sent, we are convinced that the 
answer to the yes /no question is 'yes'. 

For the 'yes' cases, the acceptance probability is exactly 1 when Merlin does everything right. On 
the other hand, if the answer is 'no', the acceptance probability of the QMA amplification scheme 



9 



is already exponentially small, as shown in Section l2~3l This finishes the proof of our Theorem [2] 
for a special class of verifier circuits, QMA^ is equal to QMAi. 

Today, we do not know which circuits V have the nice property described above. Nevertheless, 
there is a possibility that circuits without it can be (easily) slightly modified to have it. Merlin 
could send us a classical hint about the modification, and we would do it, keeping the properties 
of the circuit required in the definition of QMA. If this were possible, QMAi = QMA. 



4 Preparing Witnesses for QMA 

Given a verifier circuit V for a problem in QMA, what could we do to actually prepare a witness 
which the circuit accepts? Poulin and Wocjan investigated this |2] together with the problem 
of preparing ground states of local Hamiltonians. This question is not simple. The first idea 
would be to do a basic Grover search [19J for the states in the support of the projector IIi (the 
states on which the circuit V outputs 1). However, this works only when 111 commutes with IIo 
(the projector on zeros on the ancillae). When [ITi, IIo] / 0, the ancilla part of the states we get 
from Grover searching will very likely be nonzero, and the method does not produce a proper 
witness of the form \ifii) |0). Poulin and Wocjan found a way for preparing the witness in general. 
First, they run the witness-preserving QMA amplification scheme of Marriott and Watrous [1J (see 
Section I2.2[) backwards, and then do Grover search for the part of the state with zero ancillae. 
We simplify their method, showing how to search for QMA witnesses using a reverse of our fast 
QMA amplification, in a much smaller system with easier initialization. This also unifies their 
approaches to ground state and QMA witness preparation. 

Let us sketch the new filter state method. After the phase estimation (before the final Fourier 
transform) in our fast QMA amplification, we expect to have the state 



2 "-l 



k=0 



in superposition with a corresponding \ part. The state \f iPi ) is the filter state for phase ipi. 
Imagine now that we ran the phase estimation backwards, starting in (j26]) . We would obtain 
\<pf) 1 10) 2 . What would happen if we ran phase estimation backwards on 

HiL/W> 2 , (27) 

where \a) is a random state and | f lfi ) is the filter state? We would get 

(<p+\a) |0) 2 + |0) 2 + cp \/3) 12 , (28) 



where the second register of \(3) l2 is nonzero. If we created the filter state \f lfi ) with a large n, the 
coefficient c^. must be small (with high probability). The last step is then to amplify the coeffi- 
cient c Vi by amplitude amplification for the states with zeros on the second register - the phase 
estimation qubits. After we do this, we will obtain the state 

k + >i|0> 2 , (29) 
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with high probability, and from ((15)) we know that 

wt) = ^ (i«i> + \vh) = ^= m io) + ±\vt). oo) 

With probability \, projecting on the zeros of the ancillae then gives us the witness \ipi). In prac- 
tice, we would have to repeat this probabilistic method many times, scanning a range of 92's and 
verifying (with our fast QMA amplification method) whether we actually got a witness. 

The filter state \f Vi ) in our scheme sketched above is the Fourier transform of \(fi). In their first 
method for preparing ground states of many-body systems, Poulin and Wocjan use the same filter 
state, with the role of ipi played by the ground state energy. Scanning a range of energies plays the 
same role as scanning through a range of phases in the witness-preparation method. The analysis 
of the required number of phase estimation qubits n to ensure that cr. is small, and the bounds on 
c lfii thus works here as well. We point the interested reader to Appendix C of [2 J for the necessary 
details. 

The original method for preparing witnesses in [2] differs from the method for preparing 
ground states of many-body systems. It uses filter states representing measurements outputs of the 
Marriott- Watrous scheme corresponding to a certain acceptance probability. For the filter states to 
work (see Appendix D in [2]), they need to introduce an extra register containing a large number 
of ancillae, scaling as N in (J2)). The final Grover search in this method is over the space of these 
ancillae. 

By using the reverse of our QMA amplification scheme, we achieve two things. First, we unify 
the approaches to preparing ground states of many-body systems and QMA witnesses in [2J, by 
using the same type of filter states. Second, comparing (|25)) and (O shows that we now need only 
N' oc (a — b)N ancilla qubits. This greatly reduces the size of the final search space and speeds up 
the method. Nevertheless, its running time obviously still stays exponential in n, the size of the 
problem. 

5 Discussion 

First, we study the cost of amplifying the gap between the acceptance probabilities in the 'yes' and 
'no' cases for the complexity class QMA. Let L be an arbitrary language in QMA. Given a family 
{U n } of QMA(a, 6)-circuits accepting L, we show how to construct a family {V^} of QMA(1 — 
2 _r , 2 _r )-circuits accepting L. Each of the circuits V n applies the original circuit U n or its inverse 

Un at most O ti mes - Thus, the complexity of our amplification method grows linearly in 

This improves upon the performance of the amplification method in [1] whose complexity grows 
quadratically in -^r. This quadratic speed-up is reminiscent of the speed-up in Grover 's search 
algorithm and search algorithms employing quantum walks. This is not a coincidence. In fact, 
the intuition behind our amplification procedure is based on Szegedy's quantization of classical 
Markov chains - quantum walks [16]. 

To explain this intuition, let us first look at quantum walks from a point of view than slightly 
different from the one usually taken in the literature. Roughly speaking, a quantum walk is de- 
rived from two projectors P and Q such that 

1. the unique state \ir) with \\P\tt) || 2 = 1 and ||Q|vr) || 2 = 1 is the desired quantum sample of the 
stationary distribution of the corresponding classical walk, 
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2. all the other states \ip) with the property \\P \ <p)\\ 2 = 1 and orthogonal to \tt) are necessarily 
contracted by Q, meaning that \\Q \ ip) || 2 < 1 — 5. 

Here 5 denotes the spectral gap of the corresponding classical walk. To distinguish between | n) 
and \tp), we could alternatively measure the state according to the POVMs {P, I— P} and {Q, I— Q}. 
When we have the state \tt), we always obtain only the outcomes associated to P and Q. On the 
other hand, for any of the states \cp), the probability of obtaining an outcome associated to I — P or 
I — Q is at least 5. To obtain such an outcome with a constant probability we have to make 0(5^ 1 ) 
measurements. Thus, the task of distinguishing between | tt) and \(p) can be accomplished with 
complexity 0(5~ 1 ). 

We can reduce this complexity with the help of the quantum walk W = (2P — I)(2Q — I). 
The fact that \\Q \ ir)\\ 2 = 1 translates into the fact that \tt) is the unique eigenvector of W with 
eigenvalue 1 (and corresponding phase 0). Moreover, the fact that ||(3|^)|| 2 <1 — 5 translates into 
the fact that 1 92) is necessarily a superposition of eigenvectors of W whose phases have absolute 
value greater than some A. This phase gap A is related to the eigenvalue gap 5 by a quadratic relation: 
A > \f5. This leads to the quantum speed-up, because we can now distinguish between the two 
cases by running phase estimation. The required accuracy is 0(A), and we can achieve this by 
invoking W at most 0(A~ r ) = 0(5~ l/2 ) times. 

The problem of verifying witnesses for QM A problems can be readily formulated with the help 
of two projectors. P is the projector onto all ancillae being in the state |0) and Q is the projector 
onto the output qubit being in |1). In the 'yes' case, there is a state with ||P|7r)|| 2 = 1 and 
||Q|vr)|| 2 > a and in the 'no' case we have ||Q|vr) || 2 < b for all \tp) with ||P|^) || 2 = 1. We could tell 
these two cases apart with constant probability by alternatively measuring the state according to 

the POVMs {P,I - P} and {Q,I - Q} at most O (^rgp-) times. In fact, this is exactly what the 
amplification procedure in [l] does. 

Our fast QMA amplification extends the quadratic relation between the probability and phase 
gaps to the more general situation, where the acceptance probability is at least a in the 'yes' case 
and at most b in the 'no' case. Recall that the situation relevant to quantum walks corresponds to 
a = 1 and b = 1 — 5. In the general case (a < 1), we prove that the phases ip a and (pi, corresponding 
to the probability bounds a and b satisfy the separation bound ipt, — ip a = ^(a — b). By employing 

phase estimation, we can resolve these two cases by invoking W at most O f times. 

Second, we study the complexity-theoretic question whether QMA is equal to QMAi. Based on 
our new amplification procedure, we show that in some special cases (when the largest possible 
acceptance probabilities a* in the 'yes' cases satisfy a trigonometric identity), the acceptance prob- 
ability in the 'yes' case can be amplified to 1. The idea is that in these special cases the probabilities 
a* translate into 'nice' phases (p a * , which we can deterministically identify using phase estimation. 

In the future, we plan to examine whether we could exploit the quadratic relation between the 
probability and phase gaps in more general situations to obtain new faster quantum algorithms. 
We will also seek to determine ways of proving that the acceptance probability can be boosted to 
1 in new, less restrictive cases. 
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A A proof of Theorem fusing Jordan's lemma 

Theorem[3]is an important result relevant to quantum walks, and it was proved by Szegedy in [16J. 
We now prove it in a different way - using Jordan's lemma. Jordan's lemma has been recently used 
to analyze QMA amplification (1), and here we show that it is useful for quantum walks as well. 
For a short proof of Jordan's lemma, see e.g. [20]. 

Lemma 2 (Jordan '75). For any two Hermitian projectors ITi and IIo, there exists an orthogonal decom- 
position of the Hilbert space into one dimensional and two dimensional subspaces that are invariant under 
both IIi and Hq. Moreover, inside each two-dimensional subspace, ITi and Hq are rank-one projectors. 

Consider now an iV-dimensional Hilbert space H, a rank r projector ITi and a rank s projector 
IIo, with 1 < r, s < N. Jordan's lemma implies the existence of an orthonormal basis for the 
Hilbert space H which can be divided into five groups. 

1. Two-dimensional subspaces S% for i = 1, . . . , t, invariant under both IIi and IIo. Each sub- 
space Si is spanned by the orthonormal eigenvectors \v{) and \v^~) of the projector IIi, i.e. 
obeying IIi \vi) = \vi) and IIi|i^- ) = 0. 

2. Four types of one dimensional subspaces T^ bc \ where 6, c G {0, 1}. These N — 2t subspaces 
are spanned by \vf c ^), for b, c G {0, 1}, obeying 

ni K (6c) > = b\vf c) ), n K (fec) ) = c \vf c) ). (3i) 

The 2D subspaces Si can be also spanned by the orthonormal eigenvectors \wi), \ w^-} of the 
projector IIo, satisfying IIo|u>j) = \w{) and IIolw^) = 0. Hence, we can recast the projectors TIi and 
IIo in the form 

n a = Ei^^i + Ei^ 0) )k (10) i + Ei^ (11) )^ (11) i, 02) 

i=l i i 

i=l i i 

in terms of our chosen orthonormal basis of the Hilbert space TL. 

We now rewrite Theorem [3] using the notation 6i = irtpi, and provide a new proof based on 
Jordan's lemma. 

Theorem 3'. Consider two Hermitian projectors Hi, Ho and the identity operator I. The unitary operator 
(2IIi — I)(2IIo — I) has eigenvalues e ±i29i , < Qi < | in the two-dimensional subspaces Si invariant 
under Hi and H , and it has eigenvalues ±1 in the one-dimensional subspaces invariant under IIi and H . 
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Proof. With a suitable choice of the orthonormal eigenvectors {\wi), |u^)} of the projector ITo and 
defining^ the principal angle 9{ 

cos 6i = \(vi\wi)\, (33) 

we can write the transformation law 

\vi) = cos 9i\wi) + sin 8i\w^-), (34) 

\v^~) = — sin 0i\wi) + cos Oi\w i ) . (35) 

between the two bases as 

\Wi) \ , -I \v 
l„.,-L 



u[ ;;a j, 06) 



where the transformation 



U = e ie ^y = I cos 9i + ia y sin 0< (37) 
is a unitary rotation. Therefore, (2IIi — I)(2ITo — I) expressed in the basis {\vi), \Vj)} is 



(2n!-i)(2n -i) 



" 1 " 


u 


" 1 " 


-1 




-1 



C/t (38) 



2n -i 

= a z e ie ^ya z e- ie ^ = a z a z e~ i0i ^ e' i6i ^ (39) 
= e - i{2(>i)a y, (40) 

where we used the anticommutation relationship a z a y + a y a z = 0. In each two-dimensional 
subspace Si, the operator (2ITi — I)(2IIo — I) is thus a rotation by 20j. Moreover, its form is ((40)) 
also in the basis {\wi), \w^)}, because W e'^ 26 ^ U = e-^ 2 ^)^. 

To conclude the proof, let us look at the action of (2ITi — I)(2IIo — I) on the one-dimensional 
invariant subspaces. Using ((31]) , we find that it acts as an identity on the subspaces t/ 00 -* and T^ 11 ' 
and as —I on the subspaces X^ 01 -* and T^ 10 K □ 
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